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METHOD OF SYNCHRONIZING DYNAMIC DECRYPTION KEYS AND 
MATCHING CONTENT PROTECTED DATA IN A REAL TIME ENVIRONMENT 

CROSS-REFERENCE TO RELATED APPLICATIONS 

This application is based on a United States 
Provisional Patent Application No. 60/536,359, filed on 
January 14, 2 004. 

5 BACKGROUND 



1. Field 

Embodiments of the invention relate to the field of 
descrambling . More specifically, one embodiment of the 
invention relates to a system, apparatus and method for 
10 real-time synchronization between incoming scrambled 

content and the keying material used for descrambling the 
scrambled content . 



2 . General Background 

Over the last decade, there have been significant 
15 advances in content recording devices. Digital recording 
devices are starting to replace legacy analog recording 
devices such as videocassette recorders (VCRs) . The 
impetus for these advances revolves around the current 
movement towards digital communications, namely the 
20 transmission of content in a digital form. A hard disk- 
based recorder is but merely representative of the types 
of digital recording devices that is capable of producing 
high quality recordings, without the generational 
degradation (i.e., increased degradation between 
2 5 successive copies) known in the analog recording 
counterparts . 



-2- 



080398P584 



50T5778 . 02 



The movement towards digital communications and 
advancements in digital recording devices has caused 
reluctance by content providers, such as the motion 
picture and music industries for example, in providing 
5 downloadable digital content. Such reluctance is based on 
fears of unauthorized and uncontrolled copying of their 
digital content. As a result, prior to broadcast, digital 
content is often scrambled using periodically updated 
keys. In order to seamlessly descramble the scrambled 
10 digital content at the receiver side, the descrambling 
keys must be updated the same general periodicity as 
performed at the broadcast station. The period that a key 
is valid is referred to a "crypt period" . 

For instance, in a digital broadcast system, a 
15 targeted digital device features a descrambler that 
receives an incoming data stream including scrambled 
digital content . The descrambler performs key alternation 
using two different key slots, namely an "Even" key slot 
and an "Odd" key slot . 

20 More specifically, each key slot is loaded with a 

descrambling key and the descrambling keys associated with 
the key slots are alternatively accessed to descramble 
incoming content. As an example, during a first crypt 
period, a first descrambling key associated with the Even 

2 5 key slot (Even key #1) is accessed for descrambling 

purposes. At the next crypt period, a second descrambling 
key associated the Odd key slot (Odd key #1) is accessed 
for use by the descrambler. At the next crypt period, a 
substitute key (Even key #2) for the first descrambling 

3 0 key placed in the Even key slot (hereinafter referred to 

as an "updated descrambling key"), is accessed, and so on. 

The above-described conventional key alternation 
process is accomplished by alternatively updating 
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descrambling keys within either the Even key slot or the 
Odd key slot for use by the descrambler . This alternation 
process is accomplished using a slot selection flag and 
information within an entitlement control message (ECM) . 

5 Embedded in an incoming stream of cpntent 

(hereinafter referred to as a "content stream' 7 ), the slot 
selection flag signals the descrambler as to which 
descrambling key within a selected key slot needs to be 
updated. Normally, the slot selection flag identifies the 
10 key slot that is not accessed during the current crypt 
period. 

The Entitlement Control Message (ECM) is a control 
message that is demultiplexed from the content stream. 
Information contained within the ECM is used to produce 
15 the updated descrambling key. Hence, the ECM is provided 
well in advance of the content scrambled with the updated 
descrambling key to ensure seamless processing by the 
descrambler . 

Hence, as long as a newly updated descrambling key is 
20 associated with an alternative key slot not being used 
during the current crypt period, the content can be 
seamlessly descrambled. While this key alternation 
process is suitable for descrambling broadcast, scrambled 
content, it does not function in a seamless manner when 

2 5 the scrambled content is recovered from a digital 

recording device for viewing. 

Most digital recording devices feature a "trick play" 
mode, which is a transport control that allows an end user 
to navigate to different portions of the recorded content. 

3 0 Examples of certain controls during the trick play mode 

include Fast Forward, Instant Replay, etc. Such 
navigation may involve jumping between non- sequential 
content. As a result, the desired content may be 
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scrambled with descrambling keys located in the same key 
slot . 

For example, the end user may select a video frame 
scrambled with Even key #1, then select a video frame 
5 scrambled with Even key #8. In these types of situations, 
the descrambling of the stored digital content will not be 
seamless. Instead, the descrambling keys to descramble 
the non- sequential data frames are computed without 
sufficient lead time to avoid stalling the descrambler. 
10 This causes a pause that is visible to the end user. 



-5- 



080398P584 



50T5778.02 



BRIEF DESCRIPTION OF THE DRAWINGS 

Embodiments of the invention are illustrated by way 
of example and not by way of limitation in the 
accompanying drawings, in which like references indicate 
5 similar elements and in which: 

Figure 1 is an exemplary embodiment of a secure 
content delivery system including a digital device; 

Figure 2 is an exemplary embodiment of the digital 
device associated with the secure content delivery system 
10 of Figure 1; 

Figure 3 is an exemplary embodiment of operations 
performed by recorder logic and feeder logic controlled by 
a processor of the digital device of Figure 2; 

Figure 4 is a more detailed illustration of an index 
15 table located at the hard disk drive (HDD) of Figure 2; 

Figure 5 is an exemplary embodiment of a data flow by 
the digital device under logic control; 

Figure 6 is an exemplary embodiment of the incoming 
content stream received for processing by the recording 
20 logic of Figure 3; 

Figure 7 is an exemplary embodiment of the retrieval 
of content along with at least a portion of the indexing 
data and insertion of a trigger data sequence as needed by 
the feeder logic; 

2 5 Figure 8 is a first exemplary embodiment of a trigger 

data sequence; 

Figure 9 is a second exemplary embodiment of a 
trigger data sequence; 

Figure 10 is a third exemplary embodiment of a 

3 0 trigger data sequence; and 
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Figure 11 is an exemplary embodiment of a flowchart 
of the operations of the digital device to synchronize the 
loading of the descrambling keys and the stream of 
scrambled content data in real time. 
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DETAILED DESCRIPTION 

Various embodiments of the invention relate to a 
system, apparatus and method for synchronizing between the 
feed of a descrambling key and its corresponding scrambled 
5 content. According to one embodiment of the invention, 
this may be accomplished by automatically updating the 
descrambling key in response to detection of an 
artificially inserted trigger data sequence. This key 
update is performed in real-time without stalling the 
10 descrambler to fetch a new descrambling key. As a result, 
the descrambler can seamlessly descramble incoming 
scrambled content, even if the content is non-sequential 
and scrambled with different keys associated with the same 
key slot . 

15 In the following description, certain terminology is 

used to describe features of the invention. For instance, 
the terms "logic" or "logic element" generally denotes 
hardware and/or software configured to perform one or more 
functions. Examples of "hardware" include, but are not 

20 limited or restricted to an integrated circuit such as a 
processor (e.g., microprocessor, application specific 
integrated circuit, a digital signal processor, a 
microcontroller, etc.), a finite state machine, 
combinatorial logic, a programmable logic device (e.g., 

25 field programmable gate array, etc.), or the like. 

An example of "software" includes a series of 
executable instructions (e.g., module) in the form of an 
application, an applet, microcode, or even a routine. The 
software may be stored in any type of machine readable 
30 medium such as a programmable electronic circuit, a 

semiconductor memory device such as volatile memory (e.g., 
random access memory, etc.) and/or non-volatile memory 
(e.g., any type of read-only memory "ROM", flash memory), 
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a floppy diskette, an optical disk (e.g., compact disk or 
digital video disc "DVD" ) , a hard drive disk, tape, or the 
like . 

Additional terminology and varying tenses thereof may 
5 be used to describe other features of the invention. For 
example, the term "keying material" is generally defined 
as information used as a key, to generate a key or to 
recover a key. Examples of keying material include, 
without limitation, (1) a seed value used to generate a 
10 key or recover a pre-stored key, and (2) a key itself (or 
portion thereof) . The term "descrambling" is generally 
defined as an operation of converting content from an 
obfuscated format into a clear format that can be 
perceived (e.g., viewed and/or listened) by an end user. 

15 The term "content" is generally defined as data 

formed by one or more data units (e.g., packets, frames, 
etc.) . These content may be video, audio, or any other 
data type such as an image, a file, a document including 
alphanumeric text, a web page or the like. 

2 0 Referring to Figure 1, an exemplary embodiment of a 

secure content delivery system 100 is shown. Content 
delivery system 100 includes a digital device 110 that 
receives content from one or more content providers via a 
first transmission medium 120. The content is propagated 

25 as part of a bit stream, namely a series of digital bits 
in succession with address and/or control information 
(hereinafter referred to as "content stream"). Digital 
device 110 may operate as any of a wide variety of 
products, including one or more of the following: a 

30 digital recording device such as a digital versatile disk 
(DVD) recorder, digital VHS video cassette recorder (D-VHS 
VCR), CD-ROM recorder (e.g., CD-R and CD-RW), MP3 
recorder, or hard disk-based (HDD) recorder; a set-top 
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box; a digital satellite receiver; a television; a 
cellular telephone; or a computer. Of course, other 
products may be adapted to deploy the invention as 
claimed. 

5 As shown, when implemented as a digital recording 

device, digital device 110 may be coupled to a playback 
device 130 (e.g., television, audio receiver and/or 
speakers, a monitor, etc.) via a second transmission 
medium 140. Transmission mediums 120 and 140 operate to 

10 transmit an incoming content stream to digital device 110 
and from digital device 110 to playback device 130, 
respectively. "Transmission medium" 120 and 140 may 
include, but is not limited to electrical wires, optical 
fiber, cable, a wireless link established by wireless 

15 signaling circuitry, or the like. 

Referring now to Figure 2, a first exemplary 
embodiment of digital device 110 associated with content 
delivery system 100 of Figure 1 is shown. Herein, digital 
device 110 comprises an interface 210, a processor 220, a 
20 memory 230, a stream processor 240, an optional interface 
250 and an optional storage device 260. 

As shown, interface 210 is adapted to receive 
incoming content stream 2 00, including scrambled content 
202. Scrambled content 202 comprises one or more (N) data 

25 units (e.g., video, audio, etc.) that are scrambled with 

periodically altered keys. According to one embodiment of 
the invention, scrambled content 202 is multiplexed with 
one or more ECMs 2 04 associated therewith. The ECMs 2 04 
provides keying material for use in descrambling scrambled 

3 0 content 2 02. 

According to one embodiment of the invention, as 
shown collectively in Figures 2 and 3, memory 23 0 is 
loaded with recorder logic 232 and feeder logic 234, 
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namely software that is executed by processor 22 0 for this 
embodiment of the invention. As shown, memory 23 0 is 
deployed external to processor 22 0 as non- volatile memory 
(e.g., flash, read only memory, battery-backed random 
5 access memory, etc.). Of course, it is contemplated that 
memory 230 may be implemented as on-chip memory or may be 
situated internally within a semiconductor package as part 
of a multi-chip processor module. 

As shown in detail in Figure 3, recorder logic 232 is 
10 adapted to parse incoming content stream 200 into N 

separate data units 206i-206 N (N.>1) , each having data in a 
scrambled format. Recorder logic 232 is further adapted 
to extract information from each data unit 206x-206 N as 
metadata, namely data that preserves the relationship 
15 between each data unit 206i-206 N and the keying material 

associated therewith. According to one embodiment of the 
invention, the metadata (hereinafter referred to as 
"indexing data'' 208i-208 N ) identifies certain attributes of 
the corresponding data units 206i-206 N . These attributes 

2 0 include, but are not limited or restricted to the 

following: (1) a sequence number assigned to the data 
unit; (2) a transmission (broadcast) time for the data 
unit; (3) keying material associated with the data unit; 
(4) a key slot number to which its descrambling key 
25 resides, and the like. 

Thereafter, recorder logic 232 begins the transfer of 
data units 206i-206 N and indexing data 208i-208 N into 
storage device 260. 

As shown in detail in Figure 2, storage device 260 is 

3 0 located within digital device 110 and is deployed as a 

hard-disk drive (HDD) . It is contemplated, however, that 
storage device 260 may be deployed external to digital 
device 110 or as another type of readable machine medium. 
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Storage device 260 stores an index table 270 along with 
data unit 206i-206 N in a storage location separate from 
index table 2 70. 

As shown in Figure 4, index table 270 is segregated 
5 into a plurality of entries 272x-272 N , which entry 

associated with indexing data 208i,..., or 2068 N associated 
with a particular data units 206i-206 N . It is contemplated 
that one or more attribute from indexing data 208;l-2 08 n may 
be used in locating its corresponding data unit 206i-206 N , 
10 respectively. 

Referring back to Figures 2 and 3, feeder logic 234 
is implemented with software modules perform the 
operations described below. Herein, feeder logic 234 
accesses indexing data 208± associated with a targeted data 

15 unit stored in storage device 260 (e.g., data unit 206i, 

where l<;i£N) . Based on information stored within indexing 
data 208i associated with data unit 206i, feeder logic 234 
is able to determine whether the current key value 
( u Current_Key" ) and the key value needed for descrambling 

20 scrambled content contained in data unit 206± 

( u Future_Key" ) are different as well as to locate data 
unit 206i. 

The key value comparison may be accomplished through 
a number of techniques. For instance, where keying 

25 material is used as a descrambling key, Current_Key is 

merely compared to the accessed keying material. However, 
where keying material is used to generate or recover a 
descrambling key, the accessed keying material is compared 
to the keying material used to generate or recover 

3 0 Current_Key. 

Of course, in lieu of comparison of the entire keying 
material, it is contemplated that the comparison may be 
conducted between a portion of the accessed keying 
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material and a portion of Current__Key or the keying 
material used to produce Current_Key. While these are a 
few of the possible comparison techniques described for 
illustrative purposes only, it is contemplated that other 
5 comparison techniques may be utilized. 

Upon determining that Current_Key and Future_Key are 
different, feeder logic 206i inserts a trigger data 
sequence 280 prior to recovered data unit 206± (i.e., prior 
to where the descrambling key changes) . Trigger data 
10 sequence 280 provides information to stream processor 240 
to indicate that an updated descrambling key is needed to 
descramble the scrambled content contained within data 
unit 206±. 

As an optional feature, interface 2 50 may be adapted 
15 as an expansion slot to receive a removable device 252, 
which is complementary to interface 250. For this 
embodiment, interface 250 is a smart card interface 
adapted for attachment to a smart card. Of course, 
interface 2 50 may be configured to support other form 
2 0 factors besides a smart card, such as a CableCard having a 
PCMCIA interface format . 

According to one embodiment of the invention, keying 
material accessed by feeder logic 234 may be provided to 
removable device 252 if an updated descrambling key is 

2 5 required. Based on the accessed keying material, 

removable device 2 52 generates at least one updated 
descrambling key for descrambling the scrambled content 
associated with the targeted data unit. The updated 
descrambling key may be provided to stream processor 240 

3 0 for insertion into an appropriate key slot or provided to 

feeder logic 234 for insertion into trigger data sequence 
280 itself. Of course, the keying material and/or the 
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descrambling keys may be encrypted during transmissions 
with removable device 2 52 if such security is desired. 

Referring to Figure 2, stream processor 240 is 
responsible for the descrambling of content placed in a 
5 scrambled format for transmission to digital device 110. 
According to one embodiment of the invention, stream 
processor 240 comprises a demultiplexer 242, a descrambler 
244, and a decoder 248. In general, demultiplexer 242, 
descrambler 244 and decoder 248 collectively operate to 

10 convert content from an obfuscated format into a clear 
format that can be perceived by an end user. Moreover, 
any of these logic elements may be configured to detect a 
trigger data sequence, and in response, to automatically 
update the descrambling key in real-time without stalling 

15 stream processor 24 0. 

According to one embodiment of the invention, 
demultiplexer 242 is adapted to separate the scrambled 
content of each incoming data unit from other types of 
information. Moreover, demultiplexer 242 may be adapted 
2 0 to detect a trigger data sequence and to extract commands 
used' to adjust the operations of stream processor 240. 
For instance, demultiplexer 242 may be adapted to route 
commands to decoder 248 to alter its functionality (e.g., 
select a specific decryption algorithm, etc.). Likewise, 

2 5 demultiplexer 242 is adapted to route commands to 

descrambler 244 to alter its functionality. 

Descrambler 244 is adapted to descramble the 
scrambled content using descrambling keys stored in 
internal memory 245. An example of internal memory 245 

3 0 includes one or more registers forming an Even key slot 

246 and/or Odd key slot 247. In response to detection of 
a trigger data sequence, descrambler 244 is configured to 
use information provided by the trigger data sequence to 
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obtain the updated descrambling key. For instance, the 
key material may be used to generate the updated 
descrambling key. Alternatively, the key material may be 
used as an index value to recover the updated descrambling 
5 key from non-volatile memory placed within descrambler 244 
or within stream processor 240. Alternatively, the key 
material may be placed directly into a key slot identified 
by trigger data sequence. 

Decoder 24 8 is used to decode the descrambled content 
10 if the content is also encoded. One type of decoding 
involves decryption . 

Referring to Figure 5, an exemplary embodiment of a 
data flow under control by recorder logic 232 and feeder 
logic 234 of digital device 110 is shown. Herein, 
15 recorder logic 232 parses received content, temporarily 

stored in a record buffer 285, into N separate data units 
206i-206 N , each having data in a scrambled format. 
Furthermore, recorder logic 2 32 extracts indexing data 
208i-208 N associated with data units 206i-206 N . 

20 Thereafter, data units 206x-206 N along with their 

indexing data 208i-208 N (collectively referred to as 
"Content 1 - ContentN' 7 ) are stored within storage device 2 60 
(see Figure 6) . More specifically, as described above, 
recorder logic 232 loads indexing data 208i-208 N into index 

25 table 270 stored in storage device 260. Recorder logic 

232 also loads scrambled data units 206i-206 N into storage 
device 260. 

When recorded, scrambled content associated with a 
particular data unit (e.g., data unit 206i) is requested 
30 for playback, feeder logic 234 accesses indexing data 2 08 x 
associated with scrambled data unit 206i and recovers the 
scrambled content associated with data unit 206i for 
playback. For example, a user requests playback of a 
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previously aired and digitally recorded television program 
and begins watching the television program. Thereafter, 
end user causes the digital device to enter into a "trick 
play" mode to navigate to a different segment of the 
5 recorded content (e.g., data unit 206i) . 

In response, feeder logic 234 accesses the broadcast 
time parameters 274 stored in index table 270 until a 
broadcast time parameter 274± associated with data unit 
206i is detected. As a result, feeder logic 234 retreives 

10 keying material 275i to determine whether the descrambling 
key currently used differs from a key value needed to 
descramble scrambled content contained in data unit 2 06i. 
Also, feeder logic 234 accesses retrieves a corresponding 
sequence number 2 7 6i for data unit 2 0 6i. Sequence number 

15 276i is used by feeder logic 234 to subsequently locate and 
retrieve data unit 206i within storage device 260. 

In the event that the descrambling key currently used 
differs from a key value needed to descramble scrambled 
content contained in data unit 206i, feeder logic 234 
20 produces trigger data sequence 280 and inserts trigger 
data sequence 2 80 prior to data unit 2 0 6i as shown in 
Figure 7. Therefore, feeder logic 234 temporarily loads 
this resultant stream of information into a playback 
buffer 290. 

25 Referring now to Figure 8, a first exemplary 

embodiment of a trigger data sequence 280 of Figure 7 is 
shown. Herein, trigger data sequence 280 comprises keying 
material 400 and a slot number 410. Keying material 400 
operates either as the updated descrambling key or as a 

3 0 value to produce or recover the updated descrambling key. 
Slot number 410 identifies which key slot is targeted to 
receive the updated descrambling key. 
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Referring now to Figure 9, a second exemplary 
embodiment of trigger data sequence 280 of Figure 7 is 
shown. Herein, trigger data sequence 280 solely comprises 
keying material 400. This implementation is possible when 
5 descrambler 244 is implemented with a single key slot. 

Referring to Figure 10, a third exemplary 
embodiment of trigger data sequence 280 of Figure 7 is 
shown. Herein, trigger data sequence 2 80 comprises keying 
material 400, slot number 410 and a command field 420, 
10 which adjusts the operations of descrambler 244. For 
instance, command field 320 may specific a particular 
descrambler mode such as what decode function is to be 
performed (e.g., DES, 3DES, AES, etc.). Command field 420 
may be used to adjust the descrambler speed. 

15 Referring back to Figure 5, once descrambler 244 

becomes aware of the presence of triggered data sequence 
280, descrambler 244 parses triggered data sequence 280 to 
obtain or decide what key to use and automatically change 
its settings appropriately to descramble incoming 

20 scrambled content associated with data unit 206i. 

For example, where the keying 'material constitutes 
the updated descrambling key, descrambler 244 loads the 
keying material into an appropriate key slot identified by 
trigger data sequence 280. As another example, 

25 descrambler 244 uses keying material 274i as an index to 
fetch descrambling keys pre-loaded into non-volatile 
memory within descrambler 244 or securely accessible by 
descrambler. These descrambling keys may be pre-loaded 
during manufacture of the stream processor 24 0 (or 

30 descrambler 244 itself if a separate integrated circuit) , 
during manufacture of the digital device, or downloaded in 
a secure manner from the content provider via a broadcast 
or unicast control message. 
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Referring now to Figure 11, an exemplary embodiment 
of a flowchart of the operations of the digital device to 
synchronize the loading of the descrambling keys and the 
stream of scrambled content data in real time is shown. 
5 First, an index table is accessed in a storage device 

(e.g., HDD) to retrieve indexing data for a specific data 
unit to be descrambled for viewing or playback (block 
500) . The specific data unit is located in the storage 
device, perhaps through use of a parameter of the indexing 
10 data associated with that data unit, and retrieved (blocks 
510 and 520) . 

Next, a decision is made whether the descrambling key 
currently be used is capable of descrambling the retrieved 
data unit (block 530) . If the current descrambling key 
15 cannot be used to descramble the retrieved data unit, a 
trigger data sequence is loaded into a temporary buffer 
prior to the retrieved data unit (block 540) . Otherwise, 
the retrieved data unit is merely loaded into the 
temporary buffer (block 550) . 

20 During its descrambling operations, descrambler 

accesses the playback buffer to obtain the retrieved data 
unit (block 560) . If a trigger data sequence is detected, 
descrambler recognizes that the following data unit will 
need to be descrambled using an updated descrambling key 

25 (block 570) . The updated descrambling key may be obtained 
through extraction of the keying material from the trigger 
data sequence, or using the keying material as a seed 
value to produce or recover the updated descrambling key 
in real-time. This technique synchronizing the updated 

30 descrambling keys with associated content. Otherwise, the 
descrambler descrambles the incoming scrambled content 
using the current descrambling key. For either condition, 
descrambler processes the retrieved information, namely 
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the data unit having content scrambled with the updated 
descrambling key (block 580) . 

In the foregoing description, the invention is 
described with reference to specific exemplary embodiments 
5 thereof. It will, however, be evident that various 
modifications and changes may be made thereto without 
departing from the broader spirit and scope of the present 
invention as set forth in the appended claims. The 
specification and drawings are accordingly to be regarded 
10 in an illustrative rather than in a restrictive sense. 
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